Fix CSRF login/logout issues and conditionally hide SaaS routes

This commit is contained in:
2026-04-30 13:18:51 +08:00
parent ee72ae0e67
commit fd5a4e40ad
416 changed files with 14522 additions and 14371 deletions

View File

@@ -49,16 +49,18 @@ class DashboardController extends Controller
{
$user = auth()->user();
// Define available routes with their permissions
$routes = [
['route' => 'users.index', 'permission' => 'manage-users'],
['route' => 'roles.index', 'permission' => 'manage-roles'],
['route' => 'plans.index', 'permission' => 'manage-plans'],
['route' => 'referral.index', 'permission' => 'manage-referral'],
['route' => 'settings.index', 'permission' => 'manage-settings'],
];
if (isSaas()) {
$routes[] = ['route' => 'plans.index', 'permission' => 'manage-plans'];
$routes[] = ['route' => 'referral.index', 'permission' => 'manage-referral'];
}
$routes[] = ['route' => 'settings.index', 'permission' => 'manage-settings'];
// Find first available route
foreach ($routes as $routeData) {
if ($user->hasPermissionTo($routeData['permission'])) {